A vulnerability marked as critical has been reported in siyuan-note SiYuan up to 3.7.1. This issue affects the function
model.CheckAuth of the component MCP Kernel. Performing a manipulation results in improper authorization.
This vulnerability is cataloged as CVE-2026-66012. It is possible to initiate the attack remotely. There is no exploit available.
It is suggested to upgrade the affected component.
